This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File:                     fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier:          D0m5kzLXvyJEBqaksEZEfG5yHWbXk6/dhmkaf82MWS0=
Subject key identifier:   A7:85:40:E6:BE:16:A9:42:60:F9:DD:C0:0A:9C:7F:79:1D:2E:0F:0A
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer:       /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial:       019BF42C030049688D3E7CFC486F969ADC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number:          1788
Signing time:             Sun 25 Jan 2026 08:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:23 +0000
Files and hashes:         1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
                          2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
                          3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
                          4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
                          5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
                          6: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (hash: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA=)
                          7: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
                          8: 9C4zylgT_v6zvEFrHmvSaBqh2J0.roa (hash: wYzWFJkfh8DVoM0PQNgjA9QYBugmyzSdp/+Mt6aeNyY=)
                          9: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
                          10: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
                          11: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
                          12: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
                          13: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=)
                          14: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
                          15: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
                          16: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: I+w+aVxoG9WkoC83NZmXn3YLePdYLoj8hJdSoq/enrY=)
                          17: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
                          18: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:03:00:49:68:8d:3e:7c:fc:48:6f:96:9a:dc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
        Validity
            Not Before: Jan 25 08:01:23 2026 GMT
            Not After : Jan 26 08:01:23 2026 GMT
        Subject: CN=a78540e6be16a94260f9ddc00a9c7f791d2e0f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:8b:07:d0:c7:65:38:a6:d1:9e:9a:ae:dd:
                    c5:2f:9a:b5:d3:9c:34:c0:29:8e:08:db:aa:e4:24:
                    45:b3:64:ee:73:ed:e2:15:01:70:73:1e:25:d5:69:
                    3c:56:e9:46:2b:13:f1:37:60:1a:05:19:d0:90:9d:
                    21:3f:d5:ad:79:95:f0:34:ac:b4:94:3a:49:7d:0d:
                    6a:d8:9d:de:0c:8c:6b:85:3b:d8:a3:03:d6:f5:bb:
                    ea:93:08:ae:8a:c3:58:0c:91:a3:06:57:42:62:91:
                    6b:96:85:75:22:e3:4f:92:00:f0:53:d3:2d:cb:3e:
                    44:b2:8a:bb:c1:39:41:20:bd:2d:e2:40:63:17:74:
                    58:a1:d2:61:57:b0:1f:b1:9e:94:38:fa:58:38:4f:
                    cf:e3:1a:32:3d:a0:fa:67:0a:5a:94:0c:07:46:17:
                    f0:41:1e:fb:7f:a6:5e:70:43:ba:24:56:b8:c8:5d:
                    6a:5d:f3:c6:8c:81:2d:4a:47:ca:b5:e3:1f:9e:89:
                    6d:03:1b:6e:eb:01:01:84:c3:bb:93:aa:c4:19:0e:
                    13:9f:3c:c9:da:8b:f9:fd:95:79:80:41:e2:2e:de:
                    86:9f:b6:b1:47:c5:85:13:fb:73:08:29:45:ad:09:
                    c1:a9:cc:a6:7c:2a:8c:d6:0a:55:e8:09:6a:fc:8f:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:40:E6:BE:16:A9:42:60:F9:DD:C0:0A:9C:7F:79:1D:2E:0F:0A
            X509v3 Authority Key Identifier:
                keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:a5:e0:3a:9c:f6:75:04:d4:35:11:b1:fd:14:79:5a:3f:
         04:42:6e:99:78:0a:1d:fe:d1:d2:bd:fb:a4:36:77:55:cf:c7:
         b6:7e:c5:44:e1:fd:cd:f2:08:c8:df:0c:63:7a:9b:05:0e:1c:
         48:b7:97:90:93:64:61:e7:1a:e4:c7:6e:0a:08:f8:c1:8a:d8:
         3c:14:95:b0:4f:91:25:cc:be:96:c8:f8:4f:02:84:b3:28:e8:
         49:32:38:0f:c0:78:68:78:cb:47:2a:a5:cd:96:4d:e4:54:d3:
         c1:15:9b:8b:e9:49:fd:49:44:a0:00:a2:89:29:36:c5:7a:b2:
         f2:7f:69:92:cc:ba:58:13:ee:1b:69:cf:07:bf:f0:b4:4a:44:
         d5:89:4f:eb:85:58:7d:15:b0:32:c6:fd:2d:a1:f0:cf:68:99:
         27:fe:05:ac:d8:1d:5d:e0:be:8f:d5:29:a2:0d:a0:63:d7:5a:
         4d:49:b9:69:b4:94:43:4d:1d:79:ca:4a:66:3e:c1:02:0d:61:
         c7:f6:0a:9a:80:e6:84:b2:90:59:fa:74:36:0f:cd:dd:04:de:
         27:9c:f8:08:cc:4b:5a:50:4a:45:ed:4c:28:bd:aa:91:9f:cb:
         da:0c:f9:3e:3f:e9:5c:61:e2:05:c6:3f:4f:61:59:84:65:cb:
         b8:77:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:02 2026 by rpki-client